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method comprising the computer-implemented step of redirecting a request to invoke 
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The method as recited in Claim 1, wherein the redirecting of the request to the policy 
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broker is achieved by substituting original code contained in the routine with 
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replacement code that invokes a routine managed by the pohcy broker. 
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The method as recited in Claim 3, wherein the replacement code includes only code 
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The method as recited in Claim 3, wherein the original code is original source code 
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and the replacement code is replacement source code. 
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and the replacement code is replacement object code. 
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The method as recited in Claim 1, wherein the one or more policy constraints include 
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one or more security constraints. 
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A computer-readable medium carrying one or more sequences of one or more 
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instructions for applying one or more policy constraints in an application program, 
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3 the one or more sequences of one or more instructions including instructions which, 

4 when executed by one or more processors, cause the one or more processors to 

5 perform the step of redirecting a request to invoke a routine contained in the 

6 application program to a policy broker without modifying program code contained in 

7 the application program that invokes the routine, wherein the processing of the 

8 request to invoke the routine by the pohcy broker causes the one or more policy 

9 constraints to be applied to invocation of the routine. 

1 9. The computer-readable medium as recited in Claim 8, further comprising one or more 

2 sequences of additional instructions which, when executed by the one or more 

3 processors, cause the one or more processors to redirect the request to the policy 

4 broker by invoking a routine managed by the policy broker. 

1 10. The computer-readable medium as recited in Claim 8, further comprising one or more 

2 sequences of additional instructions which, when executed by the one or more 

3 processors, cause the one or more processors to redirect the request to the policy 

4 broker by substituting original code contained in the routine with replacement code 

5 that invokes a routine managed by the policy broker. 

1 11. The computer-readable medium as recited in Claim 1 0, wherein the replacement code 

2 includes only code that invokes a routine managed by the policy broker. 

1 12. The computer-readable medium as recited in Claim 10, wherein the original code is 

2 original source code and the replacement code is replacement source code. 

1 13. The computer-readable medium as recited in Claim 1 0, wherein the original code is 

2 original object code and the replacement code is replacement object code. 
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14. The computer-readable medium as recited in Claim 12, wherein the one or more 
policy constraints include one or more security constraints. 

15. A method for implementing policy constraints in an application program, the method 
comprising the computer-implemented steps of: 

identifying a routine in the application program for which one or more policy 

constraints are to be applied, wherein the routine is invoked by program code 
contained in the application program; and 

without modifying the program code, substituting replacement code for original code 
contained in the identified routine, wherein execution of the replacement code 
by one or more processors causes the one or more policy constraints to be 
applied. 

16. The method as recited in Claim 15, wherein the substitution of the replacement code 
for the original code is performed without changing any calls to the routine that are 
contained in the application program. 

17. The method as recited in Claim 15, wherein the replacement code contains the 
original code. 

18. The method as recited in Claim 15, wherein the original code is original source code 
and the replacement code is replacement source code. 

19. The method as recited in Claim 15, wherein the original code is original object code 
and the replacement code is replacement object code. 

20. The method as recited in Claim 15, wherein the one or more policy constraints 
include one or more security constraints. 
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1 21 . A computer-readable medium carrying one or more sequences of one or more 

2 instructions for implementing policy constraints in an application program, the one or 

3 more sequmces of one or more instructions including instructions which, when 

4 executed by one or more processors, cause the one or more processors to perform the 

5 steps of: 

6 identifying a routine in the application program for which one or more policy 

7 constraints are to be applied, wherein the routine is invoked by program code 

8 contained in the apphcation program; and 

9 without modifying the program code, substituting replacement code for original code 
10 contained in the identified routine, wherein execution of the replacement code 

□ 11 by one or more processors causes the one or more policy constraints to be 

yi 12 applied. 

1 22. The computer-readable medium as recited in Claim 21 , wherein the substitution of 

2 the replacement code for the original code is performed without changing any calls to 

3 the routine that are contained in the application program. 

C3 1 23. The computer-readable medium as recited in Claim 21, wherein the replacement code 

2 contains the original code. 

1 24. The computer-readable medium as recited in Claim 21 , wherein the original code is 

2 original source code and the replacement code is replacement source code. 

1 25. The computer-readable medium as recited in Claim 21 , wherein the original code is 

2 original object code and the replacement code is replacement object code. 

1 26. The computer-readable medium as recited in Claim 21 , wherein the one or more 

2 pohcy constraints include one or more security constraints. 
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wherein execution of the replacement code by one or more processors causes 




Q 




me one or more policy constraints to oe applied • 




1 
1 


98 


ine apparatus as recitea m i^iaim z/, wnerem tne code suDstitution meciiamsm is 


o 


Z 




further configured to perform the code substitution without changing any calls to the 
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routine that are contained in the application program. 




1 
i 


zy. 


The apparatus as recited in Claim 27, wherein the replacement code contains the 
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The apparatus as recited in Claim 27, wherein the original code is original object code 
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and the replacement code is replacement object code. 
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The apparatus as recited in Claim 27, wherein the one or more policy constraints 
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include one or more security constraints. 
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